@stackflag.bsky.socialCVE-2026-110207 - wukong aicrm
The Wukong AICRM system lets any logged‑in user change user, role, department and agent settings because it does not verify administrator privileges. An attacker…
Too many irrelevant or confusing CVEs? Use stackflag.com
@stackflag.bsky.socialCVE-2026-104816 - misskey
The Misskey social platform’s RSS widget shows links from feeds without checking the type of link. If an attacker supplies a specially crafted link, clicking it can cause…
Too many irrelevant or confusing CVEs? Use stackflag.com
@ninjaowl.aiAn OpenAI Employee Allegedly Used a Chatbot to Help Plant a Recording Device at the Office #cybersecurity #hacking #news #infosec #security #technology #privacy
@techupscale.comJPCERT/CC Warns of Exploited Windows Shell Flaw in Patch
JPCERT/CC urges administrators to apply Microsoft's October 2026 security updates addressing an actively exploited Windows Shell vulnerability.
@theperimetersite.bsky.socialMicrosoft just dropped a patch cycle that includes 1,413 vulnerabilities. For a ten-person shop without a dedicated security person, that number is a joke. It's not an actionable piece of data; it's noise.
@ninjaowl.aiFake Calendly “Meta Careers” pages steal Facebook and Google logins #cybersecurity #hacking #news #infosec #security #technology #privacy www.malwarebytes.com...
@cti.fyi🚨New ransom group blog post!🚨
Group name: Dark Project
Post title: Specchem LLC
Location: 🇺🇸 US
Sector: Manufacturing
#ransomware #cti #threatintelligence #cybersecurity #infosec
@yogsec.bsky.socialAmphi is a free, open-source toolkit for managing cloud access policies, built on the acquired Cloud Copilot project by Act Security.
GitHub: github.com/transilience... (Transilience Shasta project page) or search Amphi on GitHub
@euvd-bot.bsky.social🚨 EUVD-2020-7355 📊 n/a 📝 In SQLite before 3.32.3, select.c mishandles query-flattener optimization, leading to a multiSelectOrderBy heap overflow because of misuse of transitive properties for c... 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-7355 #cybersecurity #infosec #cve #euvd
@euvd-bot.bsky.social🚨 EUVD-2020-7762 📊 7.8/10 📝 scp in OpenSSH through 8.3p1 allows command injection in the scp.c toremote function, as demonstrated by backtick characters in the destination argument. NOTE: the ve... 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-7762 #cybersecurity #infosec #cve #euvd
@euvd-bot.bsky.social🚨 EUVD-2020-7784 📊 n/a 📝 In Python 3.8.4, sys.path restrictions specified in a python38._pth file are ignored, allowing code to be loaded from arbitrary locations. The <executable-name>._pth fil... 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-7784 #cybersecurity #infosec #cve #euvd
@euvd-bot.bsky.social🚨 EUVD-2020-11092 📊 n/a 📝 Buffer Overflow vulnerability in one_one_mapping function in progs/dump_entry.c:1373 in ncurses 6.1 allows remote attackers to cause a denial of service via crafted co... 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-11092 #cybersecurity #infosec #cve #euvd
@euvd-bot.bsky.social🚨 EUVD-2020-11093 📊 n/a 📝 Buffer Overflow vulnerability in _nc_find_entry function in tinfo/comp_hash.c:66 in ncurses 6.1 allows remote attackers to cause a denial of service via crafted command. 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-11093 #cybersecurity #infosec #cve #euvd
@euvd-bot.bsky.social🚨 EUVD-2020-11094 📊 n/a 📝 Buffer Overflow vulnerability in fmt_entry function in progs/dump_entry.c:1100 in ncurses 6.1 allows remote attackers to cause a denial of service via crafted command. 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-11094 #cybersecurity #infosec #cve #euvd
@euvd-bot.bsky.social🚨 EUVD-2020-11096 📊 n/a 📝 Buffer Overflow vulnerability in postprocess_terminfo function in tinfo/parse_entry.c:997 in ncurses 6.1 allows remote attackers to cause a denial of service via craft... 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-11096 #cybersecurity #infosec #cve #euvd
@euvd-bot.bsky.social🚨 EUVD-2020-11097 📊 n/a 📝 Buffer Overflow vulnerability in _nc_find_entry in tinfo/comp_hash.c:70 in ncurses 6.1 allows remote attackers to cause a denial of service via crafted command. 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-11097 #cybersecurity #infosec #cve #euvd
@euvd-bot.bsky.social🚨 EUVD-2020-13826 📊 n/a 📝 The libcpu component which is used by libasm of elfutils version 0.177 (git 47780c9e), suffers from denial-of-service vulnerability caused by application crashes due t... 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-13826 #cybersecurity #infosec #cve #euvd
@euvd-bot.bsky.social🚨 EUVD-2020-14679 📊 n/a 📝 International Components for Unicode (ICU-20850) v66.1 was discovered to contain a use after free bug in the pkg_createWithAssemblyCode function in the file tools/pkgd... 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-14679 #cybersecurity #infosec #cve #euvd
@euvd-bot.bsky.social🚨 EUVD-2020-14983 📊 n/a 📝 An issue was discovered in function _libssh2_packet_add in libssh2 1.10.0 allows attackers to access out of bounds memory. 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-14983 #cybersecurity #infosec #cve #euvd
@euvd-bot.bsky.social🚨 EUVD-2020-17374 📊 n/a 📝 An issue was discovered in GnuTLS before 3.6.15. A server can trigger a NULL pointer dereference in a TLS 1.3 client if a no_renegotiation alert is sent with unexpecte... 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-17374 #cybersecurity #infosec #cve #euvd